I have text in a lookup.csv that has hard returns in it, for example:
This is the reason why the sun is hot:
But the result from the lookup turns the hard returns into spaces turning it into a single long sentence, for example:
This is the reason why the sun is hot: reason 1. reason 2. reason 3.
Is there a way to keep the hard returns (special characters in the CSV) or to put them in post lookup?
Many thanks for your time.
| append [|inputlookup lookup.csv]
and stats etc...
Is it possible your lookup is using Windows text format on a Splunk instance installed on *nix?
If so, consider using the dos2unix command on the lookup file. (You may need to install if from yum/apt)
The value of the lookup is being sent to a token if that makes things easier / more difficult